General
- Target 2026-07-22_85ebc44bebaad419490df1cdd45524d6_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc
- Size 27.4MB
- Sample260722-v3728saa68
- SHA256 95f515ab2a8a41740ad5109acf8183bed018bc8238f54977f5289fe74e13075d
- MD5 85ebc44bebaad419490df1cdd45524d6
- SHA1 ac47aeadc48c8a38524a9114ddff17f36f75cc6b
- SHA512 bda4fe085d3fe6008f2cbb9513fc40da08fb38f368f5b327be57d7f4cbe499b0880cd876d04b27476ec7959530cc020f96cddc81a2aa10cbc113c1d44c6e87f7
- SSDEEP 393216:EqRpGO2uyOuNvy7H4nZBIVK65EVKKCGF35DhDEu+JwuedNe5PZkztkHXT:EYGPza05NlPMWsXT
- TLSH T11C57D05965B591ACD25BC078D3635B12EB2270A403606FFB11B9CAB02FA3FD01E7D762
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-22_85ebc44bebaad419490df1cdd45524d6_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_85ebc44bebaad419490df1cdd45524d6_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_85ebc44bebaad419490df1cdd45524d6_coinminer_dcrat_elex_glassworm_icedid_njrat_stealc
- Size 27.4MB
- SHA256 95f515ab2a8a41740ad5109acf8183bed018bc8238f54977f5289fe74e13075d
- MD5 85ebc44bebaad419490df1cdd45524d6
- SHA1 ac47aeadc48c8a38524a9114ddff17f36f75cc6b
- SHA512 bda4fe085d3fe6008f2cbb9513fc40da08fb38f368f5b327be57d7f4cbe499b0880cd876d04b27476ec7959530cc020f96cddc81a2aa10cbc113c1d44c6e87f7
- SSDEEP 393216:EqRpGO2uyOuNvy7H4nZBIVK65EVKKCGF35DhDEu+JwuedNe5PZkztkHXT:EYGPza05NlPMWsXT
- TLSH T11C57D05965B591ACD25BC078D3635B12EB2270A403606FFB11B9CAB02FA3FD01E7D762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
Loads dropped DLL